Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

use WHMCS\Database\Capsule; goto XE7UH; XE7UH: if (!defined("\127\110\115\x43\123")) { die..

Decoded Output download

<?  use WHMCS\Database\Capsule; goto XE7UH; XE7UH: if (!defined("WHMCS")) { die("This file cannot be accessed directly"); } goto EwaxS; U5UhC: function vo_shamsi_activate() { $create_table = "CREATE TABLE `mod_shamsi` (\xa    `name` varchar(500) NOT NULL,
    `value` varchar(500) NOT NULL
    ) ENGINE=InnoDB DEFAULT CHARSET=latin1;"; $insert_value = "INSERT INTO `mod_shamsi` (`name`, `value`) VALUES ('status', 'false');"; full_query($create_table); full_query($insert_value); } goto XhYLY; XhYLY: function vo_shamsi_deactivate() { full_query("DROP TABLE `mod_shamsi`"); } goto d8FN2; EwaxS: function vo_shamsi_config() { return array("name" => "\330\264\331\x85\330\263\xdb\214 \330\xb3\330\247\330\xb2 \xd9\x88\331\207\330\xa7\330\xa8 \330\xa2\xd9\206\xd9\x84\330\xa7\xdb\x8c\331\206", "description" => "\xd8\247\333\214\xd9\x86 \331\x85\330\xad\330\xb5\331\210\xd9\x84 \xd8\252\xd9\210\xd8\xb3\330\xb7 <a href="http://vahabonline.ir" target="_blank">\331\x88\xd9\207\xd8\247\330\xa8 \330\xa2\331\x86\xd9\204\xd8\xa7\xdb\x8c\331\206</a> \xd8\xb7\xd8\xb1\xd8\247\330\xad\xdb\x8c \xd9\210 \xda\251\330\xaf\xd9\206\331\210\xdb\214\330\263\333\x8c \330\264\xd8\257\331\x87 \xd8\xa7\330\263\330\xaa", "author" => "<a href='http://vahabonline.ir' target='_blank'>\331\210\xd9\207\330\xa7\330\250 \330\xa2\331\206\331\x84\330\xa7\xdb\x8c\xd9\206</a>", "language" => "farsi", "version" => "1"); } goto U5UhC; d8FN2: function vo_shamsi_output($vahab) { function VO_Shamsi_URL() { foreach (Capsule::table("tblconfiguration")->where("setting", "SystemURL")->get() as $licens) { return $licens->value; } } if (shamsi_status() == "true") { $mstatus = "<span style="color:#5CB85C;font-weight:700;">\xd9\201\xd8\xb9\330\xa7\xd9\x84</span>"; } if (shamsi_status() == "false") { $mstatus = "<span style="color:#F44336;font-weight:700;">\xd8\272\333\214\xd8\261 \xd9\201\330\xb9\330\247\xd9\204</span>"; } echo "<div style="margin-bottom:20px;">\331\x85\330\xa7\332\x98\xd9\210\xd9\x84 \xd8\264\xd9\205\xd8\263\xdb\214 \xd8\xa8\330\261\xd8\xa7\xdb\214 \xd8\xa7\xd9\210\331\x84\xdb\214\331\x86 \330\xa8\330\xa7\330\261 \330\252\xd9\x88\330\xb3\330\267 \331\210\xd9\x87\330\xa7\330\250 \xd8\242\xd9\206\xd9\204\xd8\xa7\333\214\xd9\206 \330\xb7\330\xb1\xd8\247\330\255\xdb\x8c \xd9\x88 \330\xa8\xd9\207 \330\xb1\330\xa7\333\214\332\xaf\xd8\xa7\331\x86 \xd8\252\xd9\202\330\xaf\333\214\331\x85 \xd8\xb4\331\205\xd8\xa7 \xd8\271\xd8\262\xdb\x8c\330\262\330\247\xd9\x86 \330\xb4\330\xaf\xd9\x87 \330\xa7\xd8\263\330\xaa</div>"; echo "<ul style="margin-bottom:20px;">"; echo "<li>\xd9\210\330\xb6\xd8\271\333\214\330\252 \331\x85\xd8\xa7\xda\x98\331\x88\331\204 : " . $mstatus . "</li>"; echo "</ul>"; echo nl2br(file_get_contents("https://raw.githubusercontent.com/vahabonline/themes_info/master/vo_shamsi.txt?v=" . rand())); if ($_SERVER["REQUEST_METHOD"] == "POST") { $ShamsiUrl = VO_Shamsi_URL(); $ShamsiIp = $_SERVER["REMOTE_ADDR"]; nl2br(file_get_contents("http://trace.ivahab.ir/t.php?pid=218&ip={$ShamsiIp}&adress={$ShamsiUrl}")); $status = $_POST["status"]; full_query("UPDATE `mod_shamsi` SET `value`='{$status}' WHERE name = 'status'"); echo "<script>window.location.replace("addonmodules.php?module=vo_shamsi");</script>"; } echo ''; echo "<form method="post" style="margin-top:20px;">"; if (shamsi_status() == "true") { echo "<input type="hidden" name="status" value="false">"; echo "<button type="submit" class="btn btn-danger">\330\xba\333\214\330\261\xd9\x81\330\xb9\xd8\247\xd9\204 \xda\xa9\330\261\330\xaf\xd9\x86</button>"; } if (shamsi_status() == "false") { echo "<input type="hidden" name="status" value="true">"; echo "<button type="submit" class="btn btn-success">\331\201\330\xb9\330\xa7\xd9\x84 \332\251\330\xb1\xd8\xaf\331\206</button>"; } echo "</form>"; echo "<div style="margin-top:20px;">\330\xaa\xd9\x85\330\247\xd9\205\333\x8c \xd8\xad\331\x82\331\x88\xd9\202 \330\xa8\xd8\261\330\xa7\xdb\x8c <a href="http://vahabonline.ir" target="_blank">\xd9\x88\xd9\207\xd8\247\xd8\xa8 \330\242\xd9\x86\331\204\xd8\xa7\333\214\331\x86</a> \331\x85\xd8\255\xd9\x81\331\210\330\270 \331\205\333\x8c \330\250\330\247\330\xb4\xd8\257 . </div>"; }; ?>

Did this file decode correctly?

Original Code

use WHMCS\Database\Capsule; goto XE7UH; XE7UH: if (!defined("\127\110\115\x43\123")) { die("\124\x68\x69\163\40\146\151\154\x65\40\143\x61\x6e\156\157\x74\40\x62\x65\x20\141\x63\143\x65\163\163\x65\x64\40\x64\151\162\145\x63\164\154\171"); } goto EwaxS; U5UhC: function vo_shamsi_activate() { $create_table = "\103\x52\105\x41\124\105\x20\x54\x41\102\114\105\x20\x60\155\157\x64\x5f\x73\150\141\155\x73\x69\x60\x20\50\xa\x20\40\x20\40\x60\x6e\141\155\x65\140\40\x76\x61\x72\143\150\141\162\x28\65\x30\x30\51\40\x4e\117\x54\x20\116\125\114\114\x2c\12\x20\40\x20\x20\140\x76\141\154\x75\x65\x60\40\166\141\x72\143\150\x61\162\50\65\x30\x30\x29\x20\x4e\117\124\40\x4e\125\x4c\114\12\40\40\40\x20\51\x20\x45\116\x47\x49\x4e\x45\x3d\x49\x6e\x6e\157\x44\102\x20\x44\105\x46\101\x55\x4c\124\40\103\x48\101\122\123\x45\x54\75\x6c\141\x74\151\x6e\61\73"; $insert_value = "\x49\x4e\123\x45\x52\124\40\111\x4e\x54\x4f\x20\x60\155\157\x64\x5f\x73\150\x61\x6d\163\151\140\x20\50\140\156\x61\155\x65\140\x2c\x20\x60\x76\x61\154\x75\x65\140\x29\x20\x56\101\114\x55\105\x53\x20\50\x27\x73\164\141\x74\x75\163\x27\x2c\x20\x27\146\141\154\x73\145\x27\51\73"; full_query($create_table); full_query($insert_value); } goto XhYLY; XhYLY: function vo_shamsi_deactivate() { full_query("\x44\x52\x4f\120\40\x54\101\102\114\105\x20\x60\155\157\144\x5f\x73\x68\141\155\x73\151\x60"); } goto d8FN2; EwaxS: function vo_shamsi_config() { return array("\x6e\141\155\145" => "\330\264\331\x85\330\263\xdb\214\40\330\xb3\330\247\330\xb2\40\xd9\x88\331\207\330\xa7\330\xa8\40\330\xa2\xd9\206\xd9\x84\330\xa7\xdb\x8c\331\206", "\144\145\x73\143\x72\151\x70\x74\151\157\x6e" => "\xd8\247\333\214\xd9\x86\40\331\x85\330\xad\330\xb5\331\210\xd9\x84\40\xd8\252\xd9\210\xd8\xb3\330\xb7\x20\x3c\x61\40\x68\x72\x65\x66\75\42\150\164\x74\160\72\x2f\x2f\x76\x61\150\x61\142\x6f\156\x6c\x69\156\145\56\x69\162\x22\40\x74\141\162\147\145\164\75\x22\137\142\x6c\141\156\x6b\42\76\331\x88\xd9\207\xd8\247\330\xa8\40\330\xa2\331\x86\xd9\204\xd8\xa7\xdb\x8c\331\206\x3c\57\x61\x3e\x20\xd8\xb7\xd8\xb1\xd8\247\330\xad\xdb\x8c\40\xd9\210\x20\xda\251\330\xaf\xd9\206\331\210\xdb\214\330\263\333\x8c\40\330\264\xd8\257\331\x87\x20\xd8\xa7\330\263\330\xaa", "\141\x75\164\150\157\162" => "\x3c\141\x20\150\x72\145\x66\75\x27\x68\x74\x74\x70\x3a\57\x2f\166\141\150\141\x62\157\156\x6c\x69\x6e\x65\x2e\x69\x72\x27\40\164\x61\x72\147\145\x74\x3d\x27\x5f\142\x6c\141\156\x6b\47\x3e\331\210\xd9\207\330\xa7\330\250\x20\330\xa2\331\206\331\x84\330\xa7\xdb\x8c\xd9\206\74\57\x61\x3e", "\154\x61\x6e\147\165\x61\147\145" => "\146\x61\x72\x73\151", "\x76\145\x72\163\151\x6f\x6e" => "\x31"); } goto U5UhC; d8FN2: function vo_shamsi_output($vahab) { function VO_Shamsi_URL() { foreach (Capsule::table("\x74\x62\154\x63\157\156\x66\151\147\x75\x72\141\164\x69\x6f\x6e")->where("\x73\x65\164\164\151\x6e\147", "\123\171\x73\164\x65\x6d\125\x52\x4c")->get() as $licens) { return $licens->value; } } if (shamsi_status() == "\164\x72\x75\x65") { $mstatus = "\74\x73\160\141\156\x20\163\164\x79\x6c\x65\75\42\143\157\x6c\x6f\162\x3a\43\x35\x43\102\x38\65\103\73\x66\157\x6e\164\55\167\145\151\x67\150\164\x3a\67\x30\x30\73\x22\x3e\xd9\201\xd8\xb9\330\xa7\xd9\x84\74\x2f\163\160\x61\x6e\x3e"; } if (shamsi_status() == "\146\x61\x6c\x73\145") { $mstatus = "\x3c\163\x70\x61\156\x20\x73\164\171\154\145\x3d\42\x63\157\154\x6f\162\72\43\106\64\64\63\x33\66\x3b\146\157\x6e\164\55\167\x65\151\147\x68\164\72\x37\60\x30\73\42\76\xd8\272\333\214\xd8\261\x20\xd9\201\330\xb9\330\247\xd9\204\74\x2f\x73\x70\141\x6e\x3e"; } echo "\74\x64\151\x76\x20\163\x74\171\x6c\145\75\42\x6d\x61\162\x67\x69\x6e\55\x62\157\x74\x74\x6f\155\x3a\x32\60\x70\170\73\x22\76\331\x85\330\xa7\332\x98\xd9\210\xd9\x84\40\xd8\264\xd9\205\xd8\263\xdb\214\40\xd8\xa8\330\261\xd8\xa7\xdb\214\x20\xd8\xa7\xd9\210\331\x84\xdb\214\331\x86\40\330\xa8\330\xa7\330\261\x20\330\252\xd9\x88\330\xb3\330\267\40\331\210\xd9\x87\330\xa7\330\250\x20\xd8\242\xd9\206\xd9\204\xd8\xa7\333\214\xd9\206\x20\330\xb7\330\xb1\xd8\247\330\255\xdb\x8c\40\xd9\x88\40\330\xa8\xd9\207\40\330\xb1\330\xa7\333\214\332\xaf\xd8\xa7\331\x86\40\xd8\252\xd9\202\330\xaf\333\214\331\x85\40\xd8\xb4\331\205\xd8\xa7\40\xd8\271\xd8\262\xdb\x8c\330\262\330\247\xd9\x86\x20\330\xb4\330\xaf\xd9\x87\x20\330\xa7\xd8\263\330\xaa\x3c\57\144\151\166\x3e"; echo "\74\165\x6c\x20\x73\x74\x79\154\x65\75\42\x6d\x61\162\x67\151\x6e\55\142\157\x74\x74\157\x6d\x3a\x32\x30\160\170\x3b\x22\76"; echo "\x3c\154\151\76\xd9\210\330\xb6\xd8\271\333\214\330\252\40\331\x85\xd8\xa7\xda\x98\331\x88\331\204\x20\72\x20" . $mstatus . "\x3c\x2f\154\x69\76"; echo "\x3c\x2f\x75\154\76"; echo nl2br(file_get_contents("\150\164\164\x70\163\72\x2f\57\162\141\x77\x2e\x67\151\x74\x68\165\142\165\163\x65\x72\x63\157\156\x74\x65\x6e\164\56\143\157\x6d\x2f\166\x61\x68\141\x62\x6f\x6e\154\151\156\145\x2f\164\150\145\x6d\x65\163\x5f\151\156\x66\157\x2f\155\141\x73\164\x65\x72\x2f\166\x6f\x5f\163\x68\x61\155\163\x69\56\x74\x78\164\x3f\166\x3d" . rand())); if ($_SERVER["\x52\x45\121\125\105\x53\124\x5f\115\x45\x54\x48\117\104"] == "\x50\x4f\x53\124") { $ShamsiUrl = VO_Shamsi_URL(); $ShamsiIp = $_SERVER["\x52\105\115\117\x54\105\x5f\101\x44\104\x52"]; nl2br(file_get_contents("\150\164\164\160\x3a\57\x2f\x74\x72\x61\x63\145\x2e\x69\166\141\x68\x61\142\56\151\162\x2f\x74\x2e\x70\x68\x70\77\x70\x69\x64\x3d\x32\x31\70\46\x69\x70\x3d{$ShamsiIp}\46\141\x64\162\145\x73\x73\x3d{$ShamsiUrl}")); $status = $_POST["\163\x74\x61\x74\165\x73"]; full_query("\125\120\104\x41\124\x45\x20\x60\x6d\157\144\x5f\163\x68\x61\155\x73\151\x60\40\123\x45\124\40\140\x76\141\x6c\x75\x65\140\75\47{$status}\x27\x20\x57\110\105\122\x45\40\x6e\x61\x6d\145\40\x3d\x20\x27\163\x74\141\x74\165\163\47"); echo "\x3c\x73\x63\162\151\x70\164\x3e\x77\x69\156\144\x6f\167\56\154\x6f\x63\141\x74\x69\157\156\56\x72\145\x70\x6c\141\x63\145\50\x22\x61\x64\x64\157\x6e\155\157\x64\165\154\x65\x73\56\x70\x68\160\77\x6d\157\x64\x75\154\x65\x3d\x76\x6f\x5f\163\150\x61\155\163\x69\x22\51\73\74\57\163\143\x72\x69\160\164\76"; } echo ''; echo "\x3c\146\x6f\162\155\x20\x6d\145\164\150\157\144\x3d\x22\x70\157\163\x74\x22\40\163\x74\x79\154\x65\x3d\x22\155\x61\x72\147\151\x6e\x2d\x74\x6f\x70\x3a\62\x30\160\x78\x3b\42\x3e"; if (shamsi_status() == "\164\x72\165\x65") { echo "\x3c\151\156\x70\x75\164\x20\x74\x79\160\145\75\x22\x68\151\x64\144\x65\156\x22\x20\x6e\141\155\145\x3d\42\163\x74\x61\164\x75\163\x22\40\166\141\x6c\165\x65\x3d\42\x66\x61\x6c\163\145\42\x3e"; echo "\x3c\142\x75\x74\164\157\156\x20\x74\x79\160\x65\x3d\x22\x73\165\142\155\151\x74\42\40\x63\x6c\141\x73\x73\75\x22\142\164\x6e\x20\142\164\156\x2d\144\141\156\x67\x65\x72\x22\x3e\330\xba\333\214\330\261\xd9\x81\330\xb9\xd8\247\xd9\204\40\xda\xa9\330\261\330\xaf\xd9\x86\74\57\x62\165\x74\x74\x6f\x6e\x3e"; } if (shamsi_status() == "\x66\x61\154\163\145") { echo "\x3c\x69\x6e\x70\x75\164\x20\164\x79\160\x65\x3d\x22\x68\x69\x64\144\x65\156\42\40\156\141\x6d\145\x3d\x22\163\x74\141\164\x75\x73\x22\x20\x76\x61\x6c\165\x65\x3d\42\164\x72\x75\145\42\x3e"; echo "\x3c\x62\165\x74\x74\x6f\x6e\40\x74\171\160\145\x3d\42\x73\165\x62\x6d\151\164\x22\40\x63\x6c\x61\163\x73\x3d\42\142\x74\156\x20\142\x74\x6e\x2d\x73\x75\x63\x63\x65\163\x73\x22\x3e\331\201\330\xb9\330\xa7\xd9\x84\x20\332\251\330\xb1\xd8\xaf\331\206\74\57\x62\165\164\164\157\156\x3e"; } echo "\x3c\57\146\x6f\x72\155\x3e"; echo "\x3c\x64\151\x76\x20\x73\164\171\154\x65\75\42\x6d\141\x72\x67\151\156\55\164\x6f\160\x3a\x32\x30\160\x78\73\42\x3e\330\xaa\xd9\x85\330\247\xd9\205\333\x8c\40\xd8\xad\331\x82\331\x88\xd9\202\x20\330\xa8\xd8\261\330\xa7\xdb\x8c\x20\74\x61\x20\150\x72\145\x66\75\42\x68\x74\164\x70\x3a\57\57\x76\x61\x68\141\x62\157\156\x6c\151\x6e\x65\56\x69\x72\42\40\164\141\x72\x67\x65\164\75\42\137\142\154\x61\156\x6b\42\76\xd9\x88\xd9\207\xd8\247\xd8\xa8\x20\330\242\xd9\x86\331\204\xd8\xa7\333\214\331\x86\x3c\x2f\x61\x3e\40\331\x85\xd8\255\xd9\x81\331\210\330\270\x20\331\205\333\x8c\40\330\250\330\247\330\xb4\xd8\257\40\56\x20\74\x2f\144\x69\166\x3e"; };

Function Calls

None

Variables

None

Stats

MD5 e37e6124da092297b7fbf54627b040e6
Eval Count 0
Decode Time 76 ms